MaveriK Posted October 4, 2007 Share Posted October 4, 2007 Morning, Our Sophos server is firing some services using RunAs in the registry using username bert shall we say. There is no reference to a password in any of the keys so if i want to change the user account thats starting these services from bert to fred i edit the entries. What i cant get my head around or find is where windows is getting the password from to start these services? Link to comment Share on other sites More sharing options...
carl0s Posted October 4, 2007 Share Posted October 4, 2007 It doesn't have the /savecred parameter does it? Other than that, I dunno Seems a bit of an odd way to do things anyway. Are you saying there is a "runas /user:bert sophosupdate.exe" in HKLM\SW\Microsoft\Windows\CurrentVersion\Run or something? Link to comment Share on other sites More sharing options...
Recommended Posts
Please sign in to comment
You will be able to leave a comment after signing in
Sign In Now